agentproto mcp-app

agentproto mcp-app <appId>

A stdio MCP server scoped to ONE installed app's tools — the buyer-facing distribution path for an app (e.g. a book bundle) that shouldn't hand a Codex/Cursor/Windsurf client the full daemon /mcp gateway (~177 core tools including command_execute, fs, agent_*).

Unlike mcp-bridge, which proxies every daemon tool verbatim, mcp-app reads the target app's ui.tools allowlist off its installed APP.md and registers exactly those tools, one MCP tool per allowlisted name. Each call forwards a generic { args } payload to the daemon's POST /apps/:appId/tool-call route — the same allowlist+dispatch path (performAppToolCall) the browser bridge (agentproto app serve) and the app_tool_call MCP verb already share, so this surface can't drift from either and the allowlist is enforced server-side too, not just by this process's own tool registration.

The app must already be installed (agentproto app install <dir>) and must declare a ui.tools allowlist in APP.md — mcp-app refuses to serve an app with no declared allowlist rather than falling back to exposing every daemon tool.

Daemon dependencyCopy Anchor Link

Starting the process needs no running daemon — it only reads the app's APP.md off disk to build the tool list. Only an actual tool call needs agentproto serve up; when it isn't, a call returns a clear MCP error result ("could not reach the daemon ... Start it: agentproto serve") rather than the process crashing or refusing to start.

ConfigurationCopy Anchor Link

The default port is read from ~/.agentproto/config.json → daemon.port (default 18790).

Registering in a stdio MCP clientCopy Anchor Link

{
  "mcpServers": {
    "my-book": {
      "command": "agentproto",
      "args": ["mcp-app", "my-book"]
    }
  }
}

install-mcp --app <appId> writes this entry for you (cursor, codex, claude-desktop, windsurf) instead of hand-editing a client's config.

StartupCopy Anchor Link

agentproto mcp-app: serving 6 tool(s) for app "my-book" (dispatching to http://127.0.0.1:18790/apps/my-book/tool-call)

The process parks forever — StdioServerTransport stays alive until stdin closes or the process is killed.

ErrorsCopy Anchor Link

agentproto mcp-app: no installed app "my-book" — run `agentproto app install <dir>` first.
agentproto mcp-app: app "my-book" has no `ui.tools` allowlist declared in APP.md — mcp-app requires an explicit allowlist to scope what a buyer's MCP client can see. Add `ui: { tools: [...] }` to APP.md.

See alsoCopy Anchor Link

• install-mcp.md — writes this command into a client's config for you (--app)
• mcp-bridge.md — the unscoped, full-daemon equivalent
• app.md — app install, the prerequisite for mcp-app
• serve.md — the daemon that answers /apps/:appId/tool-call